Android zero-day vulnerabilities actively abused. Update as soon as you can

Google released Android security updates fixing 43 vulnerabilities, including two actively exploited zero-days: CVE-2024-43093 (a Unicode normalization bypass enabling a local privilege escalation that requires user interaction) and CVE-2024-50302 (a Linux kernel HID-driver flaw that allowed kernel memory access and was reportedly used by authorities with forensic tools to unlock a device). Users are urged to apply updates (patch level 2025-03-05 or later) as vendors roll out fixes.